Cyber Threat Intelligence Specialist

Vodafone Limited
London, UK
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Open Source Technology Pattern Recognition Software Vulnerability Management Cyber Threat Analysis

Job description

To reduce Vodafone’s cyber risk exposure by delivering timely, actionable threat intelligence that directly supports day-to-day defence, incident response, and control decisions addressing current risks across the business.

The Cyber Threat Intelligence Specialist operates at Group level, focusing on analysing threat activity and adversary behaviour to produce practical intelligence that enables effective detection, response, and mitigation across Vodafone’s global footprint.

  • Deliver operational and tactical threat intelligence on active threat actors, campaigns, and techniques impacting Vodafone’s networks, IT environment, and services, with a focus on supporting detection and mitigation of threats.
  • Support live incidents, investigations, and Threat Action Groups by monitoring adversary activity, providing timely intelligence updates, and maintaining situational awareness throughout operational events.
  • Analyse threat reporting, tooling, and external intelligence to identify actionable indicators, attack patterns, and detection opportunities, feeding directly into CSOC, Incident Management, and defensive teams.
  • Track intelligence outcomes by assessing whether intelligence contributed to detection improvements, response actions, vulnerability remediation, or threat disruption, and feed lessons learned back into operational processes.

Requirements

Do you have experience in Incident management?, * Strong understanding of active nation-state and financially motivated threat actors targeting telecoms, enterprise networks, and critical national infrastructure, with focus on actor tactics, techniques and procedures (TTP’s).

  • Hands-on experience producing and applying operational threat intelligence, including indicator development, attack pattern analysis, and supporting detection, response, and remediation activities.
  • Ability to triage, correlate, and integrate multiple intelligence sources (telemetry, open source, vendor, and partner intelligence) into clear, actionable outputs.
  • Effective stakeholder engagement skills across SOC, Incident Management and cyber defence teams, with the ability to communicate threat information clearly to technical audiences under operational pressure.
  • Experience working with external intelligence communities and information-sharing groups to enrich situational awareness and support operational security outcomes.

Benefits & conditions

Pulled from the full job description

  • Company pension
  • Cycle to work scheme
  • Season ticket loan
  • Discounted gym membership, Yearly bonus: 10% Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year Charity days: 5 days/year Maternity leave: 52 weeks: the first 13 weeks are fully paid, followed by 26 weeks of half pay Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%. Access to: private medical, private dental, free health assessments, share save scheme Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan

About the company

At Vodafone, we’re not just shaping the future of connectivity for our customers - we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact., We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people’s lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn’t a concept; it’s lived, breathed, and cultivated through everything we do. You’ll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We’re committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.

You must create an Indeed account before continuing to the company website to apply

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:29 min

Forecasting organizational cybersecurity risks through public employee reviews

1:26 min

Selecting open source technologies for multi-cloud capability

Ingo Weichsel Ā· WWC 2023

1:09 min

Improving efficiency with pattern recognition and canvas interfaces

Vitaly Friedman Vitaly Friedman Ā· WWC Europe 2026

1:23 min

Understanding the complexity of cybersecurity domains

Jennifer Reif Ā· LIVE

1:23 min

Evaluating open source possibilities for runtime technologies

Daniel Graff +1 Ā· WWC 2021

1:06 min

Implementing runtime threat event frameworks for attack telemetry

Tom Tovar Ā· WWC 2023

Videos

See all

Related articles

See all